
Windows-based C++ network scanner that fingerprints Cisco SD-WAN/vManage services and checks for CVE-2026-20127 exposure via HTTP endpoint analysis.
CVE-2026-20127 Scanner Overview This project is a Windows-based network scanning tool written in C++ that attempts to identify potential Cisco SD-WAN / vManage-like services and perform a vulnerability check against a referenced issue labeled CVE-2026-20127.
Features IP range scanning (start → end IP) service fingerprinting for Cisco SD-WAN / vManage indicators HTTP response header and body analysis Sends test request to a suspected administrative endpoint Detects possible exposure based on response content and status codes Simple interactive CLI interface
Performs secondary request to a sensitive endpoint: /dataservice/client/admin/settings Evaluates response for signs of: Administrative access Configuration data exposure Authentication bypass indicators
Example Output []wiz~# /scan []ip start~# 192.168.1.1 [*]ip end~# 192.168.1.10
[*] Scanning 192.168.1.1 192.168.1.1 - not vulnerable - cve-2026-20127
[*] Scanning 192.168.1.5 192.168.1.5 - vulnerable - cve-2026-20127